x.com is owned by PayPal.if its a phish... they went to great lengths...and even have their domain listed as owned by PayPal.but - just in case - I still go to paypal.com to get to my account.